On February 21, 2025, when copyright staff went to approve and signal a schedule transfer, the UI showed what appeared to be a legit transaction Together with the intended destination. Only once the transfer of cash towards the concealed addresses set from the malicious code did copyright staff